| Package | Affected versions | Patched versions |
|---|---|---|
| org.jenkins-ci.plugins:testlink | < 2.13 | 2.13 |
| testlink | ≤ 3.12 |
A cross-site scripting vulnerability exists in Jenkins TestLink Plugin 2.12 and earlier in TestLinkBuildAction/summary.jelly and others that allow an attacker who can control e.g. TestLink report names to have Jenkins serve arbitrary HTML and JavaScript
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free